BECKHOFF IPC-Security - Manual (Page 60)

4. Click on Browse and select the TwinCAT installation directory, by default C:\TwinCAT\, followed by
clicking on Open
5. Activate the checkbox next to the TwinCAT directory
6. Click on OK to close the settings window
A.4.3.14. Restricting USB drives
To prevent users from attaching USB Storage devices, for example a USB memory stick, to the IPC, you
only need to deny both the local user account and the SYSTEM account access to the following files, where
%SystemRoot% defines the location of the Windows directory:
▪ %SystemRoot\%\Inf\Usbstor.pnf
▪ %SystemRoot%\Inf\Usbstor.inf
▪ %SystemRoot%\System32\DriverStore\Usbstor.inf*
This prevents users to add new USB Storage devices to the system. However, if there have been some
previously plugged-in USB devices you need to disable the USB Storage driver completely by changing
the ImagePath value under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor to a
value of your choice, for example just add the String .deactivated.
60